updated tomcat to v6.0.36 - the only one left at v6